Release notes Dec 10 - 16 2018

This week, we released an option to make MFA setup mandatory on a per-user basis, and the ability for employees to set up email-based MFA for themselves.

Mandatory MFA usage

Multi-factor authentication (MFA) is an extra layer of user authentication that improves system security.

We've launched an option you can enable that makes it mandatory for users to have an MFA option enabled. You can enable this for individual users, or mass edit user profiles to assign it to many users at once.

Note: We recommend you or the user set up MFA before enabling this requirement. If no MFA option is enabled for a user and you set this to mandatory, they will be required to set up an MFA option before they can access their account. Note that MFA can't be set up via Replicon Mobile.

Administrators still define how often email verification is needed using the Administration > System and Security > Security Settings page. Users must be assigned Edit Multi-Factor Authentication Methods permission in their User type permission profile before they'll be allowed to set up MFA.